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WATERMARK EMBEDDING AND DETECTION 

BACKGROUND OF THE INVENTION 
Field Of The Invention 

[0001] The invention relates to a method and arrangement for 
watermarking an information signal, for example, an audio or video 
5 signal. The invention also relates to a method and arrangement for 
detecting a watermark in such an information signal. 

Description Of The Related Art 

[0002] A known method of watermarking a video signal is 
10 disclosed in International Patent Application WO-A- 99/45705 , 

corresponding to U.S. Patent Application Serial No. 09/423,273, 
filed March 2, 1999. In this method, a watermark pattern is added 
to the video signal. A watermark detector correlates the same 
pattern with the suspect signal. If the correlation exceeds a given 
15 threshold, the pattern is said to be present. The presence or 

absence of the pattern represents a single bit of information. The 
embedded watermark may also carry a multi-bit payload. In the 
system disclosed in WO-A-99/45705, the payload is represented by a 
combination of one or more basic patterns and spatially shifted 
20 versions thereof. The payload is encoded into the respective shift 
vectors. The watermark detector correlates each basic pattern with 
the suspect signal, and determines the spatial positions of the 
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basic patterns with respect to each other. The detector further 
checks whether said positions constitute a valid payload. 
[0003] The process of correlating watermark patterns with the 
suspect signal requires the watermark detector to have locally 
5 stored versions of said patterns. In view thereof, it is desired 
that the watermarking system employs only a few different patterns. 
The patterns being used are kept secret to the outside world. 
However, even without knowledge of the patterns, a hacker can 
compromise the system if he has the relevant embedder at his 

10 disposal. He/she may feed an arbitrary input signal to said 

embedder and subtract the signal from its watermarked version. The 
difference signal thus obtained resembles the watermark of any 
other watermarked signal, depending on the perception model used in 
the watermark embedder at hand. If the difference signal is 

15 combined with (e.g., added to or subtracted from) a watermarked 

signal, the embedded watermark will substantially be cancelled or 
at least no longer represent a valid payload. In either case, the 
embedded watermark has been made ineffective . 

2 0 SUMMARY OF THE INVENTION 

[0004] It is an object of the invention to provide a more secure 
method and arrangement for embedding and detecting a watermark in 
an information signal, even if a hacker has a watermark embedder at 
his/her disposal. 
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[0005] To this end, the method in accordance with the invention 
comprises the steps of analyzing a given property of the 
information signal and determining an actual value of said 
property, associating different watermarks with distinct values of 
5 said property, and embedding the watermark associated with said 
actual value. The corresponding watermark detection method 
comprises the steps of analyzing a given property of the 
information signal and determining an actual value of said 
property, associating different watermarks with distinct values of 
10 said property, and detecting the watermark associated with said 
actual value. 

[0006] It is achieved with the invention that the embedded 
watermark pattern changes from time to time, as a function of the 
information signal content. Feeding an arbitrary signal to an 

15 embedder so as to produce a signal that resembles the watermark, as 
described above, does not work anymore because the arbitrary signal 
has different properties. A significant advantage of the invention 
is that the number of different watermark patterns which the 
detector must store can be kept much lower. Said number is a result 

20 of balancing detector complexity versus security. 

[0007] There are numerous examples of properties of the 
information signal that can be used for selecting the watermark 
pattern to be embedded. The only requirement to be fulfilled is its 
robustness or invariance with respect to the embedded watermark. 

25 Advantageous examples of properties are distinct distributions of 
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luminance values of a video signal, or distinct shapes of the 
frequency spectrum of an audio signal. 

[0008] Further aspects of the invention are apparent from and 
will be elucidated with reference to the embodiments described 
5 hereinafter. The examples relate to watermark embedding and 

detection of video signals, but it will be appreciated that the 
invention equally applies to audio signals or any other type of 
multimedia signal. 



10 BRIEF DESCRIPTION OF THE DRAWINGS 

[0009] Fig. 1 shows, schematically, a block diagram of a 
watermark embedder in accordance with the invention; 
[0010] Fig. 2 shows, schematically, a block diagram of a 
watermark detector in accordance with the invention;. 
15 [0011] Fig. 3 shows an arrangement illustrating the operation of 
the watermark embedder and detector; 

[0012] Figs. 4 and 5 show block diagrams of further embodiments 
of the watermark embedder in accordance with the invention; and 
[0013] Fig. 6 shows a block diagram of a further embodiment of 
20 the watermark detector in accordance with the invention. 



DESCRIPTION OF THE PREFERRED EMBODIMENTS 
[0014] Fig. 1 shows, schematically, a block diagram of an 
embodiment of a watermark embedder 1 in accordance with the 
25 invention. It will here be assumed that the embedded watermark 
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represents a 1-bit payload. For example, the absence of a watermark 
indicates that the video signal may freely be copied, whereas the 
presence of a predetermined watermark denotes that making a copy of 
the signal is prohibited. 
5 [0015] The embedder 1 receives an input video signal I in the 
form of a sequence of images, and comprises an adder 11 which adds 
a watermark pattern W A to each image. The embedder 1 further 
comprises an image analyzer 12, a selector 13 and a read-only 
memory 14 in which a plurality of different watermark patterns 

10 W x . . .W N are stored. The analyzer 12 receives the video signal and 
analyzes a given property P of the video signal as a function of 
time. The actual value of property P found by analyzer 12 is 
applied to the selector 13. In response thereto, the selector 13 
selects and applies one of the stored watermark patterns W x . . ,W N to 

15 the adder 11 for embedding. 

[0016] The analyzer 12 may take numerous forms. A few examples 
will be given to provide sufficient teaching to enable a skilled 
person to design appropriate alternative embodiments. The property 
being analyzed may be the distribution of luminance values across 

20 the image (spatial distribution) or across a sequence of images 

(temporal distribution) . In a first example, the analyzer divides 
each image into sub- images, and determines which of said sub- images 
has the highest average luminance. The relevant sub-image number is 
the actual value of property P. In a second example, the analyzer 

25 assigns a "0" to each sub- image having a low average luminance and 
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a " 1" to each sub- image having a high average luminance. Each video 
image is now characterized by an n-bit code, where n is the number 
of sub- images. The relevant n-bit code is the actual value of 
property P. The property being analyzed may also be local image 
5 activity. Such an analysis can easily be carried out in the 
frequency domain. 

[0017] Fig. 2 shows, schematically, a block diagram of a 
preferred embodiment of a watermark detector 2 in accordance with 
the invention. The detector 2 receives a suspect video signal J and 

10 comprises an image analyzer 22, a selector 23 and a read-only 

memory 24 which are identical to the corresponding counterparts of 
embedder 1. Accordingly, the analyzer 22 analyzes the same property 
P of the video signal, and the selector 23 selects the same 
watermark pattern W from the stored patterns . .Vi Uf as selected in 

15 the embedder 1. 

[0018] The detector 2 further comprises a correlation circuit 21 
which calculates the correlation between each image of the suspect 
video signal and the applied watermark pattern Wi. If the 
correlation exceeds a predetermined threshold, the selected 

20 watermark pattern Wi is said to be present (D=l) , otherwise, it is 
said to be absent (D=0) . 

[0019] The correlation circuit 21 is preferably of a type which 
performs the correlation for all possible spatial positions of the 
applied watermark with respect to the image . Such a correlation 
25 circuit is disclosed in International Patent Application WO-A- 
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99/45705. The correlation circuit generates a correlation pattern 
which exhibits a peak for each spatial position of the watermark. 
WO-A-99/45705 describes that multiple peak positions may represent 
a payload. However, as mentioned above, the payload in this example 
5 is a 1-bit copy control signal. The detection circuit 2 will 
consider the presence of 2 or more peaks as an invalid payload 
(D=0) . 

[0020] It is assumed that the watermark patterns Wi...W N are 
secret and can neither be retrieved by interrogating the embedder 

10 or detector circuits. As will now be explained with reference to 
Fig. 3, the invention prevents a hacker from compromising the 
system when he/she happens to have an embedder at his/her disposal. 
In Fig. 3, a potential hacker receives a video signal V having 
been watermarked by an embedder la. The signal V may be a recorded 

15 signal, in which case, the actual embedding took place a long time 
ago. The embedder la is of a type as described above with reference 
to Fig. 1. 

[0021] The hacker has an identical embedder lb at his/her 
disposal. An arbitrary video signal X is applied to said embedder 
20 lb so as to locally generate a watermarked video signal X 1 . An 
adder 3 subtracts the arbitrary signal X from its watermarked 
version X' . The difference signal (which strongly resembles the 
embedded watermark pattern) is then combined with (added to or 
subtracted from) the watermarked signal V by a further adder 4. 
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The suspect signal V ' thus processed is applied to a watermark 
detector 2 as described above with reference to Fig. 2. 
[0022] Without the provisions of the invention, both embedders 
la and lb embed the same watermark in the respective input signals. 
5 This results either in a cancellation of the watermark in the 
suspect signal V ' or in an invalid payload due to multiple 
occurrences of the watermark pattern W at different positions. In 
both cases, the detector generates an output signal D=0 and the 
hacking attack is successful. 

10 [0023] With the provisions of the invention, the watermark Wi 

(i=l...N) in signal V 1 will generally differ from the watermark Wj 
(j=l...N) in signal X', because the contents of the original video 
signals V and X are different. The property analysis algorithm of 
detector 2 responds to the contents of signal V ■ which is 

15 substantially equal to the contents of V. Consequently, the 

watermark pattern being checked by detector 2 is the watermark 
pattern W A which has been embedded by embedder la. The detector 
ignores the additional presence of a different pattern Wj, and the 
hacking attack thus fails. 

2 0 [0024] A possible work-around is feeding the watermarked signal 
V 1 instead of an arbitrary signal X to embedder lb, so as to force 
embedder lb to select the same watermark Wj. as embedder la. To 
avoid this, the embedders la and lb are preferably of a type that 
refrains from embedding a watermark in a signal that has already 

2 5 been watermarked. Fig. 4 shows a schematic block diagram of such an 
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embedder. The embedder comprises the same adder 11, image analyzer 
12, selector 13 and ROM 14 as the embedder 1 shown in Fig. 1. The 
embedder further comprises the correlation circuit 21 of the 
detector 2 shown in Fig. 2. The correlation circuit 21 detects 
5 whether the input signal I already includes the watermark pattern 
Wi to be embedded. If that is the case (D=l) , a switch 15 is 
controlled to prevent the watermark pattern Wi from being embedded 
multiple times. 

[0025] Fig. 5 shows a schematic block diagram of a watermark 
10 embedder for embedding a multi-bit payload in the video signal. The 
embedder comprises the same adder 11, image analyzer 12, selector 

13 and ROM 14 as described before with reference to Fig. 1. The ROM 

14 now stores a plurality of sets of watermark patterns. The 
embedder further includes an encoding circuit 16 which receives a 

15 selected set i of basic watermark patterns W i(1 , W i(2 , and 

encodes a multi-bit payload d into the relative positions of said 
patterns. The basic patterns have a relatively small size (e.g., 
128x128 pixels). The watermark pattern generated by encoder 16 is. 
subsequently tiled over the image by a tiling circuit 17. The ROM 

20 14 stores different sets of basic patterns for different values of 
signal property P. The actual set of basic patterns being applied 
to encoder 16 is controlled by the actual value of property P and 
changes as a function of time. 

[0026] Fig. 6 shows the corresponding watermark detector. The 
25 detector comprises a folding circuit 25 for folding and storing 
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image segments of 128x128 pixels in a buffer prior to correlation. 
The detector further comprises the same correlation circuit 21, 
image analyzer 22, selector 23 and read only memory 24 as described 
before with reference to Fig. 2. The ROM 24 stores different sets 
5 of basic patterns for different values of signal property P. The 
actual set of basic patterns being applied to the correlation 
circuit 21 is controlled by the actual value of property P. 
[0027] It should be noted that the invention is not limited to 
the watermarking systems described in the embodiments. For example, 

10 a watermarking system is known that uses n different watermark 
patterns, each pattern corresponding to one bit of an n-bit 
payload. In accordance with this invention, the embedder and 
detector of such a system include different sets of n patterns. A 
particular set is then selected in response to the actual value of 

15 a signal property. 

[002 8] In summary, a method and arrangement for embedding and 
detecting a watermark in an information signal is disclosed. The 
embedded watermark (Wi) is selected (13) from a plurality of 
watermarks (Wi..W N ) in dependence upon a property P of the signal. 

20 An example of such a property is the distribution of luminance 
values of the current video image as calculated by an analysis 
circuit (12) . The corresponding watermark detector performs the 
same operation: the watermark being looked for depends on the same 
signal property. It is achieved with the invention that the 
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embedded watermark changes from time to time as a function of the 
information signal content, so that it cannot easily be hacked. 
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